This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft File: NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft (raw, json) Hash identifier: 3d9pCKZgGNzaNYInYUOCh/6S5W5DfqjA3eeNWzwXCjI= Subject key identifier: CE:44:99:16:94:90:1C:F2:0C:29:43:B7:EC:B6:33:B5:28:D4:6F:9B Authority key identifier: 34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF Certificate issuer: /CN=34b0c5a403e2dad3c47b791fda2042cf715009cf Certificate serial: 019B3D23122313719A382E21D23D6B05630D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft Manifest number: 084B Signing time: Sat 20 Dec 2025 19:01:07 +0000 Manifest this update: Sat 20 Dec 2025 19:01:07 +0000 Manifest next update: Sun 21 Dec 2025 19:01:07 +0000 Files and hashes: 1: NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl (hash: F9Tm3qJf4ygBJU2rNn0ajog4hqcuQIc7kEUkXQdHt+I=) 2: rNTIvqbNKxxJtGWChfe4Dqw9tgw.roa (hash: CJ6pfwFz9zw3PaH1WC3tO5GAbQu9B8MKzIYwz13JpcI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 15:46:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3d:23:12:23:13:71:9a:38:2e:21:d2:3d:6b:05:63:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=34b0c5a403e2dad3c47b791fda2042cf715009cf Validity Not Before: Dec 20 19:01:07 2025 GMT Not After : Dec 21 19:01:07 2025 GMT Subject: CN=ce44991694901cf20c2943b7ecb633b528d46f9b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0b:36:21:22:1c:33:42:93:b7:ea:a5:fe:83: 61:8f:2c:db:3a:b1:f3:7f:b7:b3:fe:b7:80:ea:75: 40:56:31:13:c9:b5:3e:89:48:eb:6a:7f:52:0b:44: 60:25:ea:15:87:8d:17:18:46:20:c6:55:55:39:88: f0:27:cc:d5:1c:a1:54:b3:d7:26:69:68:44:3d:91: 63:1c:bf:d6:79:31:a3:1d:fc:74:64:be:91:e9:6b: 01:f1:2a:f7:46:9f:f8:13:d7:ad:01:26:fe:cc:50: 52:92:c8:7d:db:1e:7a:66:fe:8f:2e:3d:f4:e6:c9: 44:33:19:a3:42:78:3a:e2:e0:80:03:53:d5:e1:5e: 7d:ec:f3:18:ae:30:a6:0b:6f:41:80:85:89:15:3a: 97:a3:15:d0:1e:d6:de:e8:2d:8a:7b:2d:e7:0d:0e: c2:2b:ec:c8:d9:28:46:90:18:c8:9a:4f:65:6e:00: 33:55:82:88:ad:09:21:d3:95:f9:1c:36:ff:f4:27: c2:ab:92:ca:96:de:29:ac:89:d5:63:35:c6:03:a6: 1c:6a:67:52:3e:9e:0b:aa:8a:81:79:d2:d0:1e:38: 75:ae:b4:01:06:2e:4b:59:2e:29:f0:c4:57:e0:b4: 74:7b:3b:db:70:e6:2c:ca:f4:6a:7b:77:42:65:7b: 89:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:44:99:16:94:90:1C:F2:0C:29:43:B7:EC:B6:33:B5:28:D4:6F:9B X509v3 Authority Key Identifier: keyid:34:B0:C5:A4:03:E2:DA:D3:C4:7B:79:1F:DA:20:42:CF:71:50:09:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLDFpAPi2tPEe3kf2iBCz3FQCc8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/16d5ce-184a-4366-8d75-aaab25894d5e/1/NLDFpAPi2tPEe3kf2iBCz3FQCc8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:32:66:4f:70:01:2f:ec:5c:a6:8c:49:f3:f1:db:1a:b8:f3: 7a:07:aa:b4:93:2f:e8:64:ec:6f:1d:6f:92:fa:5c:df:da:16: 3a:e1:30:a8:7a:2f:e7:60:ee:db:ae:aa:2f:c5:1e:7c:2e:cd: da:6d:9f:94:a5:71:47:cd:22:e3:06:0c:75:19:bb:54:4d:20: a0:78:47:7c:ea:74:b0:f2:50:8d:e1:42:8b:ed:e6:a6:30:c6: fc:d6:72:68:e6:d5:79:b8:31:a3:91:ec:24:1d:57:04:7d:44: ef:0c:59:6d:b0:ef:ed:14:0c:de:f3:de:95:6e:91:4f:50:9d: 92:10:ca:5b:ec:f2:22:89:52:29:a1:fc:1e:88:00:ee:1c:0b: c3:70:99:39:7c:a4:9b:92:63:47:dd:19:1a:ed:57:9c:50:0a: 1c:2f:e5:01:2f:e1:e1:f0:f7:84:cd:dc:be:d1:1b:fa:d9:0e: ef:57:fd:09:29:4d:0d:f6:0e:2c:86:76:cc:ce:18:45:e0:13: 1e:89:51:43:6a:db:39:e1:25:f7:74:38:d3:9b:17:7b:78:03: 8f:4b:3b:da:4d:20:b6:31:7e:b9:4d:ed:d4:33:d2:49:b2:61: ab:40:8b:87:7f:3f:07:9c:15:34:93:19:0d:8b:4e:a3:be:7a: a2:20:88:f0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs9IxIjE3GaOC4h0j1rBWMNMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM0YjBjNWE0MDNlMmRhZDNjNDdiNzkxZmRhMjA0MmNmNzE1 MDA5Y2YwHhcNMjUxMjIwMTkwMTA3WhcNMjUxMjIxMTkwMTA3WjAzMTEwLwYDVQQD EyhjZTQ0OTkxNjk0OTAxY2YyMGMyOTQzYjdlY2I2MzNiNTI4ZDQ2ZjliMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0As2ISIcM0KTt+ql/oNhjyzbOrHz f7ez/reA6nVAVjETybU+iUjran9SC0RgJeoVh40XGEYgxlVVOYjwJ8zVHKFUs9cm aWhEPZFjHL/WeTGjHfx0ZL6R6WsB8Sr3Rp/4E9etASb+zFBSksh92x56Zv6PLj30 5slEMxmjQng64uCAA1PV4V597PMYrjCmC29BgIWJFTqXoxXQHtbe6C2Key3nDQ7C K+zI2ShGkBjImk9lbgAzVYKIrQkh05X5HDb/9CfCq5LKlt4prInVYzXGA6YcamdS Pp4LqoqBedLQHjh1rrQBBi5LWS4p8MRX4LR0ezvbcOYsyvRqe3dCZXuJWQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFM5EmRaUkBzyDClDt+y2M7Uo1G+bMB8GA1UdIwQY MBaAFDSwxaQD4trTxHt5H9ogQs9xUAnPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTkxERnBBUGkydFBFZTNrZjJpQkN6M0ZRQ2M4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8xNmQ1Y2UtMTg0YS00MzY2LThkNzUt YWFhYjI1ODk0ZDVlLzEvTkxERnBBUGkydFBFZTNrZjJpQkN6M0ZRQ2M4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi8xNmQ1Y2UtMTg0YS00MzY2LThkNzUtYWFhYjI1ODk0ZDVl LzEvTkxERnBBUGkydFBFZTNrZjJpQkN6M0ZRQ2M4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOzJmT3AB L+xcpoxJ8/HbGrjzegeqtJMv6GTsbx1vkvpc39oWOuEwqHov52Du266qL8UefC7N 2m2flKVxR80i4wYMdRm7VE0goHhHfOp0sPJQjeFCi+3mpjDG/NZyaObVebgxo5Hs JB1XBH1E7wxZbbDv7RQM3vPelW6RT1CdkhDKW+zyIolSKaH8HogA7hwLw3CZOXyk m5JjR90ZGu1XnFAKHC/lAS/h4fD3hM3cvtEb+tkO71f9CSlNDfYOLIZ2zM4YReAT HolRQ2rbOeEl93Q405sXe3gDj0s72k0gtjF+uU3t1DPSSbJhq0CLh38/B5wVNJMZ DYtOo756oiCI8A== -----END CERTIFICATE-----Generated at Sat Dec 20 23:07:58 2025 by rpki-client